Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: dXXkuAhfm8VKGjH8fOFRKGc2w0iC+TyT/3d9dLSTPGM=
Subject key identifier: F8:D6:A7:FC:91:92:06:38:3F:C0:1E:B3:4E:C5:61:58:E9:97:BB:92
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 01987B9CD1F4F91D38E8464DE0FA50F0B45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 15AC
Signing time: Tue 05 Aug 2025 19:02:11 +0000
Manifest this update: Tue 05 Aug 2025 19:02:11 +0000
Manifest next update: Wed 06 Aug 2025 19:02:11 +0000
Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: 8lLw7Qzu6ELtfNUoGeEeZHnahon7YVUMKlUGskto+OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:d1:f4:f9:1d:38:e8:46:4d:e0:fa:50:f0:b4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Aug 5 19:02:11 2025 GMT
Not After : Aug 6 19:02:11 2025 GMT
Subject: CN=f8d6a7fc919206383fc01eb34ec56158e997bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:b5:2e:56:c1:e3:a0:9c:ea:ae:1a:40:db:
7a:a5:5d:a5:d7:35:40:b2:9d:2c:e2:59:40:c8:39:
a2:1a:02:28:83:de:d4:ee:36:56:77:4d:c8:88:42:
5b:0a:ff:98:a8:10:4b:06:fa:d8:52:63:77:35:6d:
75:2d:22:cc:a1:e0:68:04:e1:a5:1b:a7:48:5b:fa:
a5:3f:19:53:d0:2d:ef:c3:f1:01:63:4e:95:76:c9:
a8:e1:55:00:3f:56:35:66:fb:f4:b4:fd:60:d3:b2:
ae:42:dd:d9:f5:54:58:cb:c0:a4:0f:66:2b:6b:d5:
26:87:f1:e6:9a:b5:87:2b:d2:40:d6:ca:1a:81:1c:
8d:d2:7a:db:33:de:e0:ed:7f:a4:33:ef:4a:ad:ae:
a0:f3:48:74:a2:25:4e:8b:9b:56:e1:2e:ed:83:23:
c2:1a:59:38:c5:cc:32:2c:b6:03:e3:08:10:c7:83:
e4:0c:10:4f:3a:6c:2f:d1:62:bb:21:72:c3:3f:f4:
44:e3:0a:ea:ee:e6:b3:68:3c:7a:78:dd:21:02:40:
5f:2e:fa:00:09:21:07:c7:ec:08:fd:f5:52:32:93:
d2:a6:6d:8f:d7:28:79:a0:8a:0c:78:44:0f:34:9b:
1a:bc:93:31:93:23:b9:17:ac:60:7f:f8:d7:d6:8e:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:A7:FC:91:92:06:38:3F:C0:1E:B3:4E:C5:61:58:E9:97:BB:92
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:56:28:73:4d:be:58:12:84:46:2a:c1:92:ba:ef:23:3b:31:
58:49:0b:9d:c7:4e:a2:9f:ca:73:5f:5f:a6:47:8d:e8:30:55:
b2:5f:0c:fc:04:14:14:0b:bb:23:a2:00:c5:05:b8:f8:2e:ce:
03:f5:27:bc:fc:9a:f3:4f:0f:ca:76:b0:b1:0a:28:53:8d:75:
c0:7a:39:45:3c:74:7f:2d:75:61:1c:61:da:6a:83:30:50:c9:
04:6b:56:95:d2:96:9c:5e:b1:dc:c8:97:f8:5c:86:8f:e1:18:
2e:ce:a0:75:d1:72:19:2e:ba:92:9f:4c:55:da:b0:37:1d:eb:
be:c5:8c:49:73:ee:ab:5f:05:ba:e7:3e:e0:44:47:d7:c0:ed:
f6:59:ef:96:fd:b0:82:c6:7f:89:d7:3c:89:32:7c:04:7e:fe:
7c:0d:6e:3b:6a:00:a5:4f:f1:83:35:19:e7:70:b2:9a:6c:b5:
2a:83:e3:96:7d:5b:e2:45:0f:2d:7a:19:20:d0:bd:27:a3:0c:
26:77:4c:d9:23:46:0c:c4:cd:d6:ab:7c:24:fe:c7:f6:2f:45:
98:51:10:b1:2d:98:12:71:f1:23:fa:7e:06:25:f0:10:e1:d5:
71:ca:de:25:9f:17:f3:f5:61:fe:6b:16:5c:c6:ad:9d:c6:79:
e9:be:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:01 2025 by rpki-client